https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415160#M119533 <P>thank you vnravikumar, it worked </P> Fri, 07 Jun 2019 13:03:23 GMT dkdeepshikhaa 2019-06-07T13:03:23Z https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415157#M119530 <P>required</P> <P>if (a $lt; b)</P> <P>eval c=round(((b-a)/b)*100),0)<BR /> print c<BR /> else <BR /> print "no change"</P> <P>How to get this through splunk query?</P> Fri, 07 Jun 2019 07:31:41 GMT https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415157#M119530 dkdeepshikhaa 2019-06-07T07:31:41Z https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415158#M119531 <P>@dkdeepshikhaa </P> <P>Can you please try this?</P> <PRE><CODE>| makeresults | eval a=100,b=20,c="No Change" | eval c=case(a&lt;b,round(((b-a)/b)*100,0),1=1,c) | makeresults | eval a=100,b=200,c="No Change" | eval c=case(a&lt;b,round(((b-a)/b)*100,0),1=1,c) </CODE></PRE> Fri, 07 Jun 2019 11:43:46 GMT https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415158#M119531 kamlesh_vaghela 2019-06-07T11:43:46Z https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415159#M119532 <P>Hi</P> <P>Try this</P> <PRE><CODE>| makeresults | eval a=20,b=30 | eval c=if(a&lt;b,round(((b-a)/b)*100,0),"no change") </CODE></PRE> Fri, 07 Jun 2019 11:46:45 GMT https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415159#M119532 vnravikumar 2019-06-07T11:46:45Z https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415160#M119533 <P>thank you vnravikumar, it worked </P> Fri, 07 Jun 2019 13:03:23 GMT https://community.splunk.com/t5/Splunk-Search/if-else-with-where-clause/m-p/415160#M119533 dkdeepshikhaa 2019-06-07T13:03:23Z